Token & Contract Security
Token and contract screening on X Layer: proxy and implementation detection, mint and pause authority, approval exposure, holder concentration. Findings are evidence-based — each one names the on-chain fact it rests on, and an unavailable chain returns an error rather than a clean bill of health.
Token Metadata
ERC-20 name, symbol, decimals and total supply read directly from the contract, with the exact call results returned as evidence.
Contract Existence Check
Determines whether an address holds deployed bytecode, returning code size and code hash as evidence.
Proxy Pattern Detection
Detects EIP-1967, EIP-1822, beacon and minimal-proxy patterns by reading the standard storage slots and matching known bytecode shapes.
Implementation Address
Resolves the current implementation address behind a detected proxy and reports which slot or method produced it.
Ownership Analysis
Reads owner, admin and access-control state, flags whether ownership is an EOA, a contract, or renounced to the zero address.
Mint Permission Scanner
Scans deployed bytecode for mint-capable function selectors and verifies them with eth_call probes, reporting each selector found as evidence.
Pause & Blacklist Controls
Detects pause, freeze, blacklist and allow-list control surfaces from bytecode selectors and live state reads.
Token Tax Indicators
Detects fee-on-transfer indicators from bytecode selectors and, where a liquidity route exists, from a simulated transfer that compares sent and received amounts.
Honeypot Screen
Simulates buy and sell paths with eth_call against a real liquidity route and reports whether the sell path reverts. Screening evidence, not a guarantee.
Source Verification Status
Reports whether verified source is published for the contract on the block explorer, with compiler version and verification timestamp.
Bytecode Fingerprint
Keccak-256 fingerprint of deployed bytecode plus the extracted function-selector set, for matching against known-good or known-bad deployments.
Holder Concentration
Top-holder distribution with concentration ratios and a Herfindahl index, reporting data completeness so partial coverage is never presented as total.
Liquidity Evidence
Locates on-chain liquidity pairs for a token and reports reserves, paired asset and pool addresses as evidence of tradability.
Token Approval Check
Reads the live ERC-20 allowance a wallet has granted to a spender, with the raw and human-scaled values.
Unlimited Approval Check
Detects effectively-unlimited allowances against known router and spender addresses, ranked by exposure.
Wallet Token Exposure
Enumerates a wallet's token balances on X Layer with per-token screening flags, so risk is attributed to specific holdings.
Wallet Protocol Exposure
Maps a wallet's outstanding approvals and interactions to the protocols they expose it to, with the evidencing transactions.
Dust & Spam Token Detection
Flags dust-value and likely airdrop-spam token balances in a wallet using value thresholds and metadata heuristics.
Transaction Risk Flags
Decodes a transaction and flags risk patterns — unlimited approval, unverified target, proxy target, value to a contract — each with its evidence.
Combined Token Risk Score
Aggregates the individual screening checks into a weighted score with every contributing finding, its severity, its evidence and the overall data completeness.